AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2010-2199

HIGH · CVSS 7.2 EPSS 0.31%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2010-06-08 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2010-2199
Severity
HIGH
CVSS
7.2
EPSS
0.31%

Original NVD Description

lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade or deletion of the file in an RPM package removal, which might allow local users to bypass intended access restrictions by creating a hard link to a vulnerable file that has a POSIX ACL, a related issue to CVE-2010-2059.